topic Re: MFA for endpoint security VPN client in Firewall and Security Management

MFA for endpoint security VPN client

max71 — Wed, 10 May 2023 14:17:10 GMT

hello guys , i have a customer that request a MFA for vpn client, i can choose the right solution based on more cheaper functionality es (mail, SMS, OTP ....).

Can someone suggest me a good cheaper solution ? and how to implement it ?

Thank you

Max

Re: MFA for endpoint security VPN client

PhoneBoy — Wed, 10 May 2023 17:30:42 GMT

MFA support can be integrated via RADIUS.
If you're looking for a free solution, you can use FreeRADIUS and MultiOTP.
See: https://wiki.freeradius.org/guide/multiOTP-HOWTO

Re: MFA for endpoint security VPN client

max71 — Mon, 15 May 2023 15:43:55 GMT

Hello PhoneBoy i have a checkpoint gaia 81.10 and vpn client secure remote, and i wish to have MFA but is enought for me email notify link with password(OTP).

I have read a doc Remote Access VPN R81.20 Administration Guide (checkpoint.com) page 41 that describe a MFA for checkpoint. My question is for you is possible to me have this configuration, i have enable as reported by doc the Dynamic ID Settings e clear Use global setting, but the VPN client goes up connection without ask me something.

I have seen into Multiple Authentication Schemes for Mobile Access / Remote Access (checkpoint.com) and seems to be supportd in my version , have you some tips for me ? thank you.

Re: MFA for endpoint security VPN client

PhoneBoy — Mon, 15 May 2023 22:04:50 GMT

As far as I know, this is supported.
We'd need more details on what precisely you've configured (screenshots, etc. with sensitive details redacted) as well as the client versions involved.